Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File:                     Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier:          jTuuzEa3OKLX8vA2vTp5c2ZWrCouktBW5pj6Eqds8+E=
Subject key identifier:   F9:81:08:8A:63:87:FC:A9:D5:0F:99:B4:01:20:A7:A2:BA:42:59:BE
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer:       /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial:       01904189AEE011496020F9A3AE3F9B7180B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number:          11D4
Signing time:             Sat 22 Jun 2024 20:01:00 +0000
Manifest this update:     Sat 22 Jun 2024 20:01:00 +0000
Manifest next update:     Sun 23 Jun 2024 20:01:00 +0000
Files and hashes:         1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: qHXiLS0SHtf8zT44V6gz4GfkusRhz4EY8A5pkmmC7ME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 20:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:89:ae:e0:11:49:60:20:f9:a3:ae:3f:9b:71:80:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
        Validity
            Not Before: Jun 22 20:01:00 2024 GMT
            Not After : Jun 23 20:01:00 2024 GMT
        Subject: CN=f981088a6387fca9d50f99b40120a7a2ba4259be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:ad:87:bb:83:b7:69:0c:f9:dc:fb:7c:42:
                    07:fb:e9:85:95:3c:cb:f1:38:2c:57:46:4f:78:6f:
                    5e:56:47:3d:67:8e:8e:ab:b2:4c:cd:86:4c:d1:3d:
                    17:61:1e:be:fc:d7:7b:af:8d:f1:02:84:28:1b:1e:
                    7f:ee:e0:28:67:3d:c9:79:20:df:4b:75:07:4d:9e:
                    56:bb:ee:e4:1e:a2:33:cf:41:6a:36:10:a7:98:8c:
                    2c:63:3f:f7:02:66:17:20:a4:db:ed:f1:42:6b:e9:
                    ca:38:be:4f:cf:18:72:84:6b:f1:87:60:ff:d1:51:
                    c7:9c:68:34:d8:b8:1b:64:1c:df:2b:b7:99:d2:70:
                    1c:56:3f:a6:14:bc:59:13:5d:87:63:d3:15:9b:77:
                    a5:66:6e:79:ac:c6:22:83:1e:43:1a:44:32:5f:27:
                    93:af:19:fc:ef:be:55:d4:1d:3a:48:8c:88:48:b6:
                    2a:b0:3e:cd:e2:44:8d:64:23:3c:02:f7:6e:14:a3:
                    37:4c:ae:42:28:2b:64:58:6f:41:fe:a5:0d:80:08:
                    42:63:54:c4:9c:78:3a:0f:b0:ee:e2:ff:cf:ef:95:
                    5b:77:99:f8:05:d7:64:af:b0:25:c5:ea:1f:d5:f7:
                    90:f0:75:40:6c:5f:cb:44:ba:59:ef:48:26:be:8e:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:81:08:8A:63:87:FC:A9:D5:0F:99:B4:01:20:A7:A2:BA:42:59:BE
            X509v3 Authority Key Identifier:
                keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:82:4a:4f:ee:f9:fe:3f:c0:37:21:96:72:60:5d:4b:1e:
         b3:3f:c8:9d:8d:c4:96:5e:31:a0:a0:73:bd:71:ac:9e:e7:6f:
         67:a9:17:9d:67:13:da:cf:6c:ba:58:33:73:6b:9d:67:62:b7:
         0d:bc:c7:c0:6e:94:9b:da:db:6e:8f:a7:4d:32:eb:26:0f:ba:
         19:c4:33:e4:14:05:74:39:2f:67:d4:8d:07:cc:fa:f7:f3:4a:
         db:83:c5:15:90:e3:7b:29:37:2e:96:d3:7a:80:ba:80:31:4f:
         ad:d6:02:06:48:ed:60:db:08:65:b7:a1:80:7a:92:f9:21:98:
         f9:3a:80:80:f8:2a:79:3d:4f:3e:97:75:4b:04:3f:08:24:29:
         fc:f6:8a:70:3d:cd:2c:37:3c:4b:9e:a6:80:4b:a8:62:95:ed:
         28:e3:17:16:9c:7c:8d:45:ae:7e:61:3b:7e:72:03:db:a2:79:
         69:c2:d4:0b:fd:b0:f2:83:97:00:11:1e:01:af:42:68:92:98:
         c0:93:a1:00:b5:49:0a:dd:6a:ba:b5:ff:aa:a9:48:f9:a5:3b:
         f2:13:9d:db:78:e1:26:46:aa:d3:5f:e9:d1:89:42:b4:6b:93:
         28:40:eb:4f:eb:5c:51:b4:cb:09:dd:d1:ec:18:c7:fb:ac:55:
         80:eb:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:07 2024 by rpki-client on console-fra.rpki-client.org